clock menu more-arrow no yes

Filed under:

Yahoo confirms Contributor Network password hack, says fix is on the way

New, 3 comments

Yahoo has confirmed that about 400,000 usernames and passwords from its Contributor Network were compromised and says that users with Yahoo and other email accounts may be affected.

Yahoo Bldg
Yahoo Bldg

Yahoo has confirmed that about 400,000 user accounts and passwords from one of its services were posted online on Wednesday. In a statement given to TechCrunch, the company said that an "older file from Yahoo Contributor Network (previously Associated Content) containing approximately 400,000 Yahoo and other company users names and passwords was stolen" and posted online. It also says that less than 5 percent of the Yahoo account passwords released were still valid, and that it is "fixing" the vulnerability.

Unfortunately, the hack doesn't just affect people with Yahoo accounts. The Contributor Network allowed users to sign in with Gmail, Hotmail, AOL, or other email addresses through Facebook, and it's estimated that fewer than half the total compromised accounts were Yahoo ones. Yahoo says it's changing the passwords of people on its own network, and it's "notifying the companies whose users accounts may have been compromised." If you were signed up to the Contributor Network under any address, though, now would be a good time to change your password.